On Wed, 16 Nov 2005 at 10:31:22 -0500, Manuel Lanctot wrote: > Ansgar -59cobalt- Wiechers wrote: > > >Very doubtful. I'm not aware of any law that forbids even portscans, > > > >much less network troubleshooting or the use of tools like nmap in > >general. > > I can't find the related articles but I remember reading something about > a man who was arrested after portscanning a website because he donated > for a relief fund (after Katrina) and suspected it was a scam. I don't > remember if he was indeed charged but he was at least arrested, which is > pretty scary. >
And he (Daniel Cuthbert) did _not_ scanned the website, just tried a directory traversal (entering "higher" directories) by putting ../../../ in his browser URL field. http://taint.org/index.php?tag=ids http://www.samizdata.net/blog/archives/008118.html http://news.zdnet.co.uk/internet/security/0,39020375,39226548,00.htm http://www.theregister.co.uk/2005/10/11/tsunami_hacker_followup/ http://it.slashdot.org/article.pl?sid=05/10/07/1532241&tid=172 http://it.slashdot.org/article.pl?sid=05/11/11/228241&tid=167&tid=121&tid=223&tid=172&tid=220 -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner
